Lucene search
+L

5590 matches found

Zero Day Initiative
Zero Day Initiative
added 2023/10/19 12:0 a.m.37 views

Siemens Tecnomatix Plant Simulation SPP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Tecnomatix Plant Simulation. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists withi...

7.8CVSS6.8AI score0.00222EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/10/19 12:0 a.m.32 views

Siemens Tecnomatix Plant Simulation SPP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Tecnomatix Plant Simulation. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists withi...

7.8CVSS6.8AI score0.00222EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2023/10/19 12:0 a.m.11 views

PT-2023-7039

Name of the Vulnerable Software and Affected Versions Squid affected versions not specified Description A flaw was found in Squid, where the limits applied for validation of HTTP response headers are applied before caching. However, Squid may grow a cached HTTP response header beyond the configur...

9.3CVSS6.9AI score0.88864EPSS
SaveExploits1References75
ATTACKERKB
ATTACKERKB
added 2023/10/17 12:15 p.m.3 views

CVE-2023-39902

A software vulnerability has been identified in the U-Boot Secondary Program Loader SPL before 2023.07 on select NXP i.MX 8M family processors. Under certain conditions, a crafted Flattened Image Tree FIT format structure can be used to overwrite SPL memory, allowing unauthenticated software to...

7.8CVSS7.1AI score0.00145EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2023/10/17 12:0 a.m.9 views

The vulnerability of the Ad Hoc Transfer module of the WS_FTP Server allows attackers to carry out cross-site scripting attacks.

The vulnerability of the Ad Hoc Transfer module of the WSFTP Server server is related to the lack of security measures for the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

8.3CVSS6.9AI score0.00895EPSS
SaveExploits0References4Affected Software1
Tenable Nessus
Tenable Nessus
added 2023/10/16 12:0 a.m.49 views

Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM : Redis vulnerabilities (USN-5221-1)

The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5221-1 advisory. It was discovered that Redis incorrectly handled certain specially crafted Lua scripts. A remote attacker could possibly use this...

8.8CVSS6.9AI score0.31049EPSS
SaveExploits0References10
GithubExploit
GithubExploit
added 2023/10/15 12:14 p.m.867 views

Exploit for Improper Check for Unusual or Exceptional Conditions in Apple Ipados

CVE-2023-41993 PoC exploit for CVE-2023-41993. It's written o...

8.8CVSS8.3AI score0.29179EPSS
SaveExploits3
BDU FSTEC
BDU FSTEC
added 2023/10/14 12:0 a.m.25 views

The vulnerability of the FortiMail email protection system lies in the lack of measures taken to protect the structure of the web page, allowing attackers to execute arbitrary codes.

The vulnerability of the FortiMail email protection system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary codes remotely...

5.5CVSS6.2AI score0.00389EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/10/14 12:0 a.m.9 views

The vulnerability of the software platforms for developing and managing Magento Open Source and Adobe Commerce online stores lies in the lack of protective measures for website structures, allowing attackers to carry out cross-site scripting attacks.

The vulnerability of the Magento Open Source and Adobe Commerce software platforms for developing and managing online stores is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks...

8.7CVSS7.2AI score0.00623EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/10/14 12:0 a.m.8 views

The vulnerability of the FortiSandbox system’s threat detection and mitigation mechanism arises from the lack of measures taken to protect the website structure. This allows attackers to execute arbitrary code.

The vulnerability of the FortiSandbox threat detection and mitigation system exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

7.6CVSS6.7AI score0.00434EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/10/14 12:0 a.m.8 views

The vulnerability of the FortiOS operating system, related to the lack of protection for website structures, allows attackers to execute arbitrary code.

The vulnerability of the FortiOS operating system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

5.5CVSS6.3AI score0.00343EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/10/14 12:0 a.m.10 views

The vulnerability of the FortiSandbox system’s threat detection and mitigation mechanism arises from the lack of measures taken to protect the website structure. This allows attackers to execute arbitrary code.

The vulnerability of the FortiSandbox threat detection and mitigation system exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9.3CVSS6.7AI score0.00481EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/10/14 12:0 a.m.10 views

The vulnerability of the FortiSandbox system’s threat detection and mitigation mechanism arises from the lack of measures taken to protect the website structure. This allows attackers to execute arbitrary code.

The vulnerability of the FortiSandbox threat detection and mitigation system exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9.3CVSS6.3AI score0.00464EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/10/14 12:0 a.m.9 views

The vulnerability of the FortiSandbox system’s threat detection and mitigation mechanism arises from the lack of measures taken to protect the website structure. This allows attackers to execute arbitrary code.

The vulnerability of the FortiSandbox threat detection and mitigation system exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

4CVSS6.7AI score0.00411EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/10/13 12:0 a.m.12 views

The vulnerability of the license_details_view function in the ScanCode.io software, which allows a hacker to perform XSS attacks.

The vulnerability of the licensedetailsview function in the ScanCode.io software exists because measures to protect the structure of web pages have not been implemented. Exploiting this vulnerability could allow a malicious actor to carry out XSS attacks remotely...

6.4CVSS6.2AI score0.00438EPSS
SaveExploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/10/11 12:0 a.m.9 views

The vulnerability of D-Link DSL-3782 router’s microprogramming software allows a hacker to execute arbitrary code.

The vulnerability of D-Link DSL-3782 router’s microprogramming software is related to the lack of measures taken to protect the structure of the web page during the processing of IP address fields by the router. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9CVSS8AI score0.20525EPSS
SaveExploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/10/11 12:0 a.m.8 views

The vulnerability in the web interface of Supermicro X112 series BMC IPMI servers relates to the lack of protective measures for the website structure, allowing attackers to carry out cross-site scripting attacks.

The vulnerability in the web interface of BMC IPMI Supermicro X11 series servers exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks using specially crafted GET requests...

8.3CVSS5.8AI score0.00563EPSS
SaveExploits0References6
BDU FSTEC
BDU FSTEC
added 2023/10/11 12:0 a.m.9 views

The vulnerability of SAP BusinessObjects Web Intelligence, a web platform for analytics and reporting, relates to the lack of protective measures for the website structure. This allows attackers to gain unauthorized access to protected information.

The vulnerability of the SAP BusinessObjects Web Intelligence web platform relates to the lack of security measures for the website structure. Exploiting this vulnerability allows a malicious actor to gain unauthorized access to protected information by clicking on a specially created malicious...

6.8CVSS5.9AI score0.00328EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/10/10 12:0 a.m.9 views

The vulnerability of Acronis Cyber Protect 15’s data protection software lies in its lack of measures to protect website structures, allowing attackers to carry out cross-site scripting attacks.

The vulnerability of Acronis Cyber Protect 15 software-related data protection software is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks remotely...

5.5CVSS6.3AI score0.00522EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/10/09 12:0 a.m.7 views

Linux kernel buffer error vulnerability

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that originates from an unverified field in the xtu32 structure. An attacker could exploit the vulnerability to cause a syst...

6.7CVSS8.6AI score0.00397EPSS
SaveExploits0References17
Rows per page
Query Builder